Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214258.roa
File: AS214258.roa (raw, json)
Hash identifier: xTBS45J3Muerqtmk9Yz6TRKMVlgdKAqIWCFJbNZWNpY=
Subject key identifier: 9E:6D:CD:66:B6:11:A7:B3:0A:79:00:F4:33:BF:85:FF:EB:80:E7:9A
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7ED30EE064E278D373FA708F6FBF49230D45CD3D
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214258.roa
Signing time: Wed 25 Sep 2024 17:18:35 +0000
ROA not before: Wed 25 Sep 2024 17:13:35 +0000
ROA not after: Wed 24 Sep 2025 17:18:35 +0000
asID: 214258
IP address blocks: 2a0f:9400:7e50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:d3:0e:e0:64:e2:78:d3:73:fa:70:8f:6f:bf:49:23:0d:45:cd:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 25 17:13:35 2024 GMT
Not After : Sep 24 17:18:35 2025 GMT
Subject: CN=9E6DCD66B611A7B30A7900F433BF85FFEB80E79A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:17:b9:1f:57:d2:c8:b2:a7:e8:1a:34:6c:
dc:d8:0e:4f:d5:a8:c2:0f:f9:c7:d0:0e:11:a8:d4:
8f:d6:0d:11:53:b4:f1:69:27:97:38:ad:e7:de:8d:
cc:21:f4:eb:14:de:3e:15:98:83:2f:75:f4:f0:bf:
0e:6b:d4:2e:f7:d1:e4:6e:38:62:44:f0:9d:ba:77:
44:e0:54:79:99:c3:b2:4d:88:d8:03:05:3c:4c:f5:
5d:27:54:e0:77:93:8b:8e:9a:82:7e:9b:e8:b6:a7:
ac:5a:51:83:50:3f:fc:4b:0f:f4:a5:9c:9b:c6:0a:
99:9a:2f:9e:63:65:3e:ea:c3:ab:ba:2f:ba:38:3d:
09:22:07:c2:64:92:2c:92:01:23:af:9d:f8:98:c8:
79:4f:52:36:32:7e:5e:60:2e:e0:b1:6c:83:b1:5f:
fc:e7:37:6f:43:74:c8:23:ef:4a:10:35:d6:4d:1c:
f9:90:3b:9d:95:97:80:f0:70:ad:1e:0d:04:1a:5d:
c5:e9:d8:c6:ba:d3:99:f0:2b:f3:49:70:6e:fc:40:
b2:8d:7b:05:c2:8c:33:0e:ce:ef:f9:8d:e1:8c:0f:
f0:6b:da:d4:f5:09:41:33:85:de:cc:46:a0:91:e2:
9b:09:61:18:70:41:fe:fb:7c:bf:55:2e:b8:4d:60:
e1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6D:CD:66:B6:11:A7:B3:0A:79:00:F4:33:BF:85:FF:EB:80:E7:9A
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214258.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7e50::/48
Signature Algorithm: sha256WithRSAEncryption
0c:9c:d8:de:22:a3:04:1d:93:f6:0e:6f:a7:6e:5c:35:9b:d2:
c1:13:7f:ff:a5:f8:e1:2d:53:ff:e3:48:48:40:76:08:07:4a:
d7:88:50:84:1a:bc:a6:2a:4b:ef:c9:81:8b:29:99:1b:67:1f:
5b:c6:da:35:52:58:74:3d:d1:25:24:78:3e:57:36:47:7c:6c:
38:1e:61:3f:f5:a6:63:d6:ee:bb:3e:39:83:54:e6:a3:8c:e9:
3c:5e:2d:78:bf:ad:c1:f5:a3:41:c5:41:2e:93:e4:4e:11:18:
14:6d:08:8a:12:8c:a0:4a:08:68:c5:c6:f2:f8:2c:af:b3:d6:
f5:c0:f3:99:86:e3:35:bb:a1:73:47:c3:01:f2:cd:e8:8c:91:
6e:78:01:a3:59:ca:aa:1e:3a:55:94:b1:5e:c2:1d:21:53:84:
8d:8d:dc:a4:35:d7:ee:29:2e:7a:ff:0b:0a:d8:96:09:81:3e:
5a:0a:d4:ad:cb:bc:b1:32:d0:22:e3:da:d6:94:ef:35:66:a4:
4f:94:69:43:c9:63:bf:01:0a:67:50:bd:17:c1:8e:aa:b1:b6:
c6:2e:67:35:46:55:01:9b:79:31:dd:86:37:2a:2d:26:22:8c:
9e:11:f7:7c:18:8a:9b:24:ae:bc:14:31:59:2c:b0:fe:cd:15:
14:2a:3f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 13:19:19 2024 by rpki-client on console-fra.rpki-client.org